1154 matches found
CVE-2008-2168
Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...
CVE-2008-2168
Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...
Cross site scripting
Cross-site scripting XSS vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or HTML via the Referer header, which is not properly handled in a 404 Error page...
CVE-2008-2167
Cross-site scripting XSS vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or HTML via the Referer header, which is not properly handled in a 404 Error page...
CVE-2008-2167
Cross-site scripting XSS vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or HTML via the Referer header, which is not properly handled in a 404 Error page...
CVE-2008-2167
ZyXEL ZyWALL 100 is affected by a cross-site scripting (XSS) vulnerability where a crafted Referer header is not properly handled on the 404 error page, allowing remote attackers to inject arbitrary web script or HTML. The available documents identify the affected product and the vulnerability cl...
CVE-2008-2167: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or HTML via the Referer header, which is not properly handled in a 404 Error page...
CVE-2008-2168: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...
CVE-2008-2162
Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...
Cross site scripting
Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...
SonicWALL Email Security Error Page Cross-Site Scripting Vulnerability
Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page. CVE: CVE-2008-2162 Last updated: Aug. 8, 2017, 1:3...
CVE-2008-2162: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...
SonicWALL Email Security 6.1.1 - Error Page Cross-Site Scripting
SonicWALL Email Security 6.1.1 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/29107/info SonicWALL Email Security is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI address data i...
SonicWALL Email Security 6.1.1 - Error Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/29107/info SonicWALL Email Security is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI address data in an error page. An attacker may leverage this issue to execute...
openSUSE 10 Security Update : apache2 (apache2-5125)
This update fixes multiple bugs in apache : - cross site scripting problem in modimap CVE-2007-5000 - cross site scripting problem in modstatus CVE-2007-6388 - cross site scripting problem in the ftp proxy module CVE-2008-0005 - cross site scripting problem in the error page for status code 413...
openSUSE 10 Security Update : apache2 (apache2-5126)
This update fixes multiple bugs in apache : - cross site scripting problem in modimap CVE-2007-5000 - cross site scripting problem in modstatus CVE-2007-6388 - cross site scripting problem in the ftp proxy module CVE-2008-0005 - cross site scripting problem in the error page for status code 413...
SuSE 10 Security Update : Apache 2 (ZYPP Patch Number 5128)
This update fixes multiple bugs in apache : - cross-site scripting problem in modimap. CVE-2007-5000 - cross-site scripting problem in modstatus. CVE-2007-6388 - cross-site scripting problem in the ftp proxy module. CVE-2008-0005 - cross-site scripting problem in the error page for status code 41...
Cross site scripting
Cross-site scripting XSS vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is not properly handled in the error page...
CVE-2008-1001
Cross-site scripting XSS vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is not properly handled in the error page...
CVE-2008-1001: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is not properly handled in the error page...